Private Notice
of Hertzfeld Bioenergie GmbH
Hertzfeld Bioenergie GmbH (hereinafter “Hertzfeld”, “We” or “Us”) welcomes your visit to our websites and mobile applications (collectively, the “Online Offerings”) and your interest in our company and our products.
1. Hertzfeld Respects Your Privacy
The protection of your privacy in the processing of personal data, as well as the security of all business data, are important concerns for us which we duly consider in our business processes. We process personal data collected during your visit to our Online Offerings confidentially and solely in accordance with the applicable legal provisions.
Data protection and information security are integral elements of our corporate policy.
2. Data Controller
The data controller responsible for the processing of your data is Hertzfeld Bioenergie GmbH, except as otherwise noted in this Privacy Notice.
Our contact details are as follows:
Hertzfeld Bioenergie GmbH
Hauptstrasse 83
8840 Einsiedeln
Switzerland
3. Collection, Processing, and Use of Personal Data
3.1 Categories of Data Processed
We process communication data (e.g., name, telephone number, email address, postal address, IP address).
3.2 Principles
“Personal data” means any information relating to an identified or identifiable natural person – for example, names, addresses, telephone numbers, or email addresses that reflect a person’s identity.
We collect, process, and use personal data (including IP addresses) only where a legal basis exists or where you have given your consent (e.g., during registration).
3.3 Purposes of Processing and Legal Bases
We and our service providers process your personal data for the following purposes:
3.3.1 Provision of this Online Offering
Legal basis: Our overriding legitimate interest in direct marketing, provided that such processing is in compliance with data protection and competition law requirements.
3.3.2 Responding to User Inquiries via a Contact Form
Legal bases: Our overriding legitimate interest in marketing and in improving our products and services, provided that such processing is in compliance with data protection and competition law requirements; or for the performance of a contract or on the basis of your consent.
3.3.3 Responding to User Inquiries via Live Chat
Legal bases: Our overriding legitimate interest in marketing and in improving our products and services, provided that such processing is in compliance with data protection and competition law requirements; or for contractual performance or on the basis of your consent.
3.3.4 Responding to User Inquiries via a Chatbot
Legal bases: Our legitimate interest in improving our products and services or on the basis of your consent.
3.3.5 Detection of Disruptions and Security Purposes
Legal bases: Our legal obligations regarding data security and our overriding legitimate interest in remedying disruptions and ensuring the security of our Online Offerings.
3.3.6 Own and Third-Party Advertising, Market Research, and Reach Measurement
Legal basis: Either on the basis of your consent or our overriding legitimate interest in direct marketing, provided that such processing is in compliance with data protection and competition law requirements.
3.3.7 Protection and Defense of Our Rights
Legal basis: Our legitimate interest in asserting and defending our rights.
3.4 Log Files
With every visit to the Internet, your browser automatically transmits certain information which we store in log files. We use these log files to detect disruptions and for security purposes (e.g., to investigate attempted attacks). These log files are stored for 7 days and then deleted. Log files that must be retained for evidentiary purposes are exempt from deletion until the respective incident is conclusively resolved and may, in individual cases, be forwarded to investigative authorities.
Log files (with complete or partial IP addresses removed) are also used for analytical purposes under the conditions set forth in Section 3.4.1 (see below). In particular, log files store the following information:
-
The IP address of the device from which access is made;
-
The URL of the website from which the Online Offering was accessed (the “referrer URL”);
-
The name of the service provider used to access the Online Offering;
-
The names of the files or information retrieved;
-
The date, time, and duration of access;
-
The amount of data transferred;
-
The operating system and details regarding the internet browser used, including any installed add-ons (e.g., for Flash Player);
-
The HTTP status code (e.g., “request successful” or “file not found”).
3.5 Chatbot
We offer you the opportunity to receive advice on our products and services via a chat within our Online Offerings. The chat transcript is stored during the session. After the chat ends, this data is deleted shortly thereafter unless the chat forms part of a support or service inquiry. In such cases, the chat content will be linked to your customer account and stored for the purpose of contractual performance.
3.6 Children
This Online Offering is not directed to children under 16 years of age.
3.7 Disclosure of Data
3.7.1 Disclosure to Other Data Controllers
We will transmit your personal data to other data controllers only if necessary for contractual performance, if we or the third party have an overriding legitimate interest in such transmission, or if you have given your consent. Details regarding the legal bases and the recipients or categories of recipients are provided in Section 3.3 above.
Furthermore, data may be transmitted to other data controllers if we are required to do so by law or by enforceable governmental or judicial order.
3.7.2 Service Providers (General)
We engage external service providers for services such as marketing, programming, data hosting, and hotline support. We have carefully selected and regularly monitor these service providers, particularly with respect to their secure handling of data. All service providers are contractually bound to maintain confidentiality and comply with applicable legal requirements. Service providers may also include other companies within the Hertzfeld Group.
3.7.3 Disclosure to Recipients Outside Switzerland
We may also transfer personal data to recipients located in third countries outside Switzerland. In such cases, we ensure prior to the transfer that the recipient provides an adequate level of data protection or that your consent for the transfer is in place.
You may request an overview of the recipients in third countries and a copy of the specific agreements ensuring an adequate level of data protection by contacting us as specified in Section 10 below.
3.8 Duration of Storage; Retention Periods
We store your data for as long as necessary to provide our Online Offerings and the associated services, or as long as we have a legitimate interest in retaining the data (for example, we may have a legitimate interest in postal marketing even after contractual performance). Thereafter, we delete your personal data, except for data that we are legally required to retain (e.g., due to tax or commercial retention periods, which require us to maintain documents such as contracts and invoices for a certain period).
4. Use of Cookies
As part of providing our Online Offerings, cookies and tracking mechanisms may be used. Cookies are small text files that may be stored on your device when you visit an Online Offering. Tracking may be performed using various technologies. We process information, in particular, through pixel technology or log file analysis.
4.1 Categories
We distinguish between cookies that are strictly necessary for the technical functioning of the Online Offerings and those cookies and tracking mechanisms that are not strictly necessary. The use of the Online Offerings is generally possible without cookies that serve non-technical purposes.
4.1.1 Technically Necessary Cookies
“Technically necessary cookies” are those without which the technical provision of the Online Offering cannot be ensured (for example, cookies that store data to guarantee uninterrupted playback of video or audio content). These cookies are deleted at the end of your visit.
4.1.2 Technically Non-Necessary Cookies and Tracking Mechanisms
General:
The use of marketing cookies and tracking mechanisms enables us and our partners to display personalized offers based on an analysis of your usage behavior.
Below, we explain which mechanisms and tools we use within our Online Offerings:
Statistics:
Through the use of statistical tools, we measure, for example, the number of pages you view.
Conversion Tracking:
Our conversion tracking partners place a “Conversion Cookie” on your device if you access our website via an advertisement from the respective partner. These cookies typically expire after 30 days. If you visit certain pages on our website while the cookie is still valid, we and the respective conversion tracking partner can recognize that a particular user has clicked on the advertisement and has been redirected to our website. The data obtained via the Conversion Cookie is used to generate conversion statistics and to record the total number of users who have clicked on the advertisement and have been redirected to a page containing a conversion tracking tag.
Retargeting:
These tools create user profiles using advertising cookies or third-party advertising cookies, web beacons (invisible graphics, also known as pixels or tracking pixels), or similar technologies. These profiles are used for interest-based advertising and for controlling the frequency with which a user sees certain advertisements. The providers of these tools may, as applicable, also forward information for the purposes mentioned above to third parties. Please refer to the privacy notices of the respective providers for further details.
Please note that the use of these tools may result in the transmission of your data to recipients outside Switzerland (e.g., the USA). Details on this can be found in the descriptions of the individual marketing tools below.
Name: Google Analytics
Provider: Google Ireland Limited
Function: Analyzing user behavior (page views, number of visitors and visits, downloads), creation of pseudonymous user profiles based on cross-device information from logged-in Google users (cross-device tracking), enrichment of pseudonymous user data with target group–specific information provided by Google, retargeting, UX testing, conversion tracking, and retargeting in connection with Google Ads
Name: Google Tag Manager
Provider: Google Ireland Limited
Function: Management of website tags via an interface; integration of code on our websites
Name: Google Ads
Provider: Google Ireland Limited
Function: Placement of advertisements, remarketing, conversion tracking
For further information, please visit: https://adssettings.google.com/authenticated
Name: Google Ads Remarketing Tag
Provider: Google Ireland Limited
Function: Google processes your personal data on the basis of your consent via the “Google Ads Remarketing Tag” pixel to create campaign reports, track conversions, record click events, and perform targeted advertising (retargeting) outside our websites based on, for example, URL, referrer URL, or membership in remarketing lists defined by us. We do not receive any personal data from Google; we only receive anonymized campaign reports regarding target groups and ad performance. You may refuse interest-based advertising from Google by adjusting your ad preferences at https://www.google.com/settings/ads/onweb#display_optout. Alternatively, you may disable third-party cookies via the Network Advertising Initiative’s opt-out page at https://www.networkadvertising.org/managing/opt_out.asp or manage device identifiers in your device settings. Further guidance is available at https://support.google.com/ads/answer/1660762#mob. Additional information is available at https://policies.google.com/privacy.
Name: LinkedIn Insight Tag
Provider: LinkedIn Germany GmbH
Function: LinkedIn processes your personal data on the basis of your consent via the “LinkedIn Insight Tag” pixel to create campaign reports, track conversions, record click events, and perform targeted advertising (retargeting) outside our websites based on URL, referrer URL, an IP address (shortened or hashed for cross-device retargeting), device and browser information (user agent), and timestamp. We do not receive any personal data from LinkedIn; we only receive anonymized campaign reports regarding website target groups and ad performance. LinkedIn retains data on a pseudonymized basis for 7 days and deletes it after 180 days. For further details, please refer to https://www.linkedin.com/legal/privacy-policy.
4.2 Management of Cookies and Tracking Mechanisms
You can manage your cookie and tracking mechanism settings via your browser and/or our privacy settings.
Note: The settings you choose apply only to the browser you are using.
4.2.1 Disabling All Cookies
If you wish to disable all cookies, please go to your browser settings and disable the setting that allows cookies. Please note that this may impair the functionality of our website.
4.2.2 Managing Your Settings for Technically Non-Necessary Cookies and Tracking Mechanisms
When you visit our websites, you will be asked via a cookie layer whether you consent to the use of marketing cookies and tracking mechanisms.
In our privacy settings, you can revoke any consents you have already given (with effect for the future) or provide your consent at a later time.
5. Plugins
In the provision of our Online Offerings, cookies and tracking mechanisms may also be used via plugins. Plugins are small components that may be stored on your device when you visit an Online Offering. Tracking may be implemented using various technologies; we process information primarily using pixel technology and log file analysis.
5.1 Categories
We differentiate between cookies that are strictly necessary for the technical functions of the Online Offerings and cookies and tracking mechanisms that are not strictly necessary. The use of our Online Offerings is generally possible without non-technical cookies.
5.1.1 Technically Necessary Cookies
Technically necessary cookies are those without which the technical provision of the Online Offering cannot be ensured (e.g., cookies that store data to guarantee uninterrupted playback of video or audio content). These cookies are deleted at the end of your visit.
5.1.2 Technically Non-Necessary Cookies and Tracking Mechanisms
General:
The use of marketing cookies and tracking mechanisms enables us and our partners to display interest-based offers based on an analysis of your browsing behavior.
Statistics:
By employing statistical tools, we measure, for example, the number of page views.
Conversion Tracking:
Our conversion tracking partners place a “Conversion Cookie” on your device if you have reached our website via an advertisement from the respective partner. These cookies generally expire after 30 days. If you visit certain pages on our website while the cookie is still valid, we and the respective partner can determine that a user has clicked on the advertisement and has been redirected to a page marked with a conversion tracking tag.
Social Plugins:
On some pages of our Online Offerings, content and services from third-party providers (e.g., Facebook, Twitter) are integrated. These third parties may use cookies and active components. For more information on social plugins, please refer to Section 7 “Social Plugins” below.
Please note: The use of these tools may result in the transmission of your data to recipients outside Switzerland and the EEA, where no adequate level of data protection as defined by Swiss data protection law (DSG) may exist (e.g., the USA). Details are provided in the descriptions of the individual marketing tools above.
5.2 YouTube
This website uses videos provided by the video platform YouTube, which is operated by Google Ireland Limited.
To enhance the protection of your data during your visit, YouTube content is disabled by default and embedded in “enhanced privacy mode.”
In this mode, a connection to YouTube, including the transmission of log data to Google, is only established when you interact with the player. Such interaction constitutes your consent. When you interact with the active YouTube player, data is also transmitted to Google as the data controller, and contact is established with the Google DoubleClick advertising network, which may trigger further data processing beyond our control. Once the video is loaded, Google also employs cookies, meaning that information is retrieved and stored on your device by Google.
You may withdraw your consent at any time with effect for the future by reloading the webpage.
Further information regarding the scope and purpose of the collected data, its further processing by Google, your rights, and your available privacy options can be found in YouTube’s Privacy Notice.
5.3 Google Maps
This Online Offering utilizes mapping services from Google Maps, which is operated by Google Ireland Limited (“Google”).
Loading the map requires that you activate the corresponding plugin. If you activate the plugin, data will be transmitted to Google, cookies will be used, and contact will be established with the Google DoubleClick advertising network. This may trigger further data processing beyond our control. Once the map is loaded, cookies will be used.
Further information regarding the scope and purpose of the collected data, its further processing by Google, possible transfers of personal data to third countries (e.g., the USA), your rights, and your available privacy options can be found in Google’s Privacy Notice.
6. External Links
Our Online Offerings may contain links to third-party websites that are not affiliated with us. Once you click such a link, we have no control over the collection, processing, or use of any personal data (e.g., your IP address or the URL of the page from which the link was clicked) transmitted to that third party. We assume no responsibility for the processing of such personal data by third parties.
7. Security
Our employees and our service providers are obligated to maintain confidentiality and to comply with the applicable data protection laws.
We take all necessary technical and organizational measures to ensure an appropriate level of protection for the data we manage, particularly against the risks of accidental or unlawful destruction, alteration, loss, manipulation, unauthorized disclosure, or access. Our security measures are continuously improved in line with technological developments.
8. Rights of Users
Please refer to the contact details provided in Section 10 “Contact” to exercise your rights. Ensure that you provide us with sufficient information to unequivocally identify you.
8.1 Right to Information and Access
You have the right to obtain information from us regarding the processing of your data. This includes the right to access your personal data that we process.
8.2 Right to Rectification and Deletion
You may request that we rectify any incorrect data. Where the legal conditions are met, you may also request that we complete or delete your data.
This does not apply to data necessary for accounting and bookkeeping purposes or those subject to statutory retention periods. In such cases, if access is not required, processing will be restricted (see below).
8.3 Right to Restriction of Processing
Provided that the legal conditions are met, you may request that we restrict the processing of your data.
8.4 Data Portability
Provided that the legal conditions are met, you may request that data you have provided to us be transmitted to you in a structured, commonly used, and machine-readable format or, insofar as technically feasible, transmitted directly to a third party.
8.5 Right to Object
8.5.1 Objection to Direct Marketing
You may at any time object to the processing of your personal data for advertising purposes (“Marketing Objection”). Please note that due to organizational reasons there may be an overlap between your objection and the use of your data in an ongoing campaign.
8.5.2 Objection to Data Processing Based on “Legitimate Interest”
You further have the right to object at any time to the processing of your data by us on the basis of “legitimate interest.” In such cases, we will cease processing your data unless we can demonstrate compelling, legally mandatory reasons for further processing that outweigh your interests.
8.6 Withdrawal of Consent
If you have given us your consent to process your data, you may withdraw this consent at any time with effect for the future. This also applies to consents given prior to the applicability of the GDPR (i.e., before May 25, 2018). The lawfulness of the processing carried out until the withdrawal remains unaffected.
8.7 Right to Complain to a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. You may contact the supervisory authority responsible for your place of residence or state, or the one responsible for us.
This is:
Data Protection and Public Information Officer
Feldeggweg 1
CH-3003 Bern
Tel.: +41 58 462 43 95
Fax: +41 58 465 99 96
9. Changes to This Privacy Notice
We reserve the right to change our security and data protection measures. In such cases, we will also adjust this Privacy Notice accordingly. Please therefore refer to the most current version of our Privacy Notice.
10. Contact
If you wish to contact us, please reach us at the address provided in Section 2 “Data Controller.”
To exercise your rights or to report data protection incidents, please use the link provided on our website.
For suggestions or complaints regarding the processing of your personal data, please contact our Data Protection Officer:
Data Protection Officer
Management
Hertzfeld Bioenergie GmbH
Hauptstrasse 83
8840 Einsiedeln
Switzerland
or
Email: kontakt@hertzfeld.ch
Effective Date: 31 January 2025
Impressum
Datenschutzerklärung
AGB